chris

FreeBSD 13 — xemacs-devel-mule — vulnerability — patch and remediation guide — diagnosis and fix on FreeBSD 13

FreeBSD 13 — xemacs-devel-mule — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2022 Affected versions: FreeBSD 13 📖 ~4 min read  •  Source: FreeBSD VuXML VuXML topic: emacs — movemail format string vulnerability Related CVEs: CVE-2005-0100 Upstream summary: Max Vozeler discovered several format string vulnerabilities in the movemail utility of Emacs. They can be exploited when connecting […]

Read more
Debian 11 — libdumb — vulnerability — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libdumb — vulnerability — patch and remediation guide

🟢 Low   ⏱ 5–15 min  Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2006-3668 Upstream summary: Heap-based buffer overflow in the it_read_envelope function in Dynamic Universal Music Bibliotheque (DUMB) 0.9.3 and earlier and current CVS as of 20060716, including libdumb, allows […]

Read more
Debian 11 — sylpheed — multiple vulnerabilities (8 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — sylpheed — multiple vulnerabilities (8 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2005-0667 CVE-2005-0926 CVE-2005-3354 CVE-2006-2920 CVE-2007-1267 CVE-2007-2958 CVE-2017-17517 CVE-2021-37746 Upstream summary: Buffer overflow in Sylpheed before 1.0.3 and other versions before 1.9.5 allows remote attackers to execute arbitrary code […]

Read more
Debian 11 — libnet-dns-perl — multiple vulnerabilities (4 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — libnet-dns-perl — multiple vulnerabilities (4 CVEs) — patch and remediation guide

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2007-3377 CVE-2007-3409 CVE-2007-6341 CVE-2008-1447 Upstream summary: Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) can use the […]

Read more
Oracle Linux 8 — cryptsetup — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — cryptsetup — vulnerability — patch and remediation guide (ELSA-2022-0370)

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2022-0370 Related CVEs: CVE-2021-4122 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — python27:2.7 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python27:2.7 — vulnerability — patch and remediation guide (ELSA-2021-9128)

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-9128 Related CVEs: CVE-2021-3177 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance […]

Read more
Oracle Linux 8 — python38:3.8 and python38-devel:3.8 — vulnerability — patch and remediation guide — diagnosis and fix on Oracle Linux 8

Oracle Linux 8 — python38:3.8 and python38-devel:3.8 — vulnerability — patch and remediation guide (ELSA-2021-4162)

🟡 Medium   ⏱ 10–30 min  Last verified: 5 January 2022 Affected versions: Oracle Linux 8 📖 ~4 min read  •  Source: ELSA advisory ELSA-2021-4162 Related CVEs: CVE-2019-18874 CVE-2020-28493 CVE-2021-20095 CVE-2021-23336 CVE-2021-28957 CVE-2021-29921 Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – […]

Read more
Debian 11 — pypy3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide — diagnosis and fix on Debian 11

Debian 11 — pypy3 — multiple vulnerabilities (20 CVEs) — patch and remediation guide

🟠 High   ⏱ 15–60 min  Last verified: 5 January 2022 Affected versions: Debian 11 (bullseye) 📖 ~4 min read  •  Source: Debian Security Tracker Related CVEs: CVE-2015-20107 CVE-2019-20907 CVE-2020-10735 CVE-2020-26116 CVE-2020-27619 CVE-2020-29651 CVE-2021-23336 CVE-2021-28861  +12 more Upstream summary: In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into […]

Read more
How to Configure pfsync Firewall State Synchronization on FreeBSD 13 — step-by-step FreeBSD 13 tutorial on Progressive Robot

How to Configure pfsync Firewall State Synchronization on FreeBSD 13

Introduction This guide explains how to Configure pfsync Firewall State Synchronization on FreeBSD 13 on FreeBSD 13. FreeBSD uses the pkg(8) binary package manager, rc.conf(5) for service startup configuration, and pf(4) as its primary packet filter. There is no SELinux or AppArmor — instead, FreeBSD provides the MAC (Mandatory Access Control) framework and Capsicum for […]

Read more
CHAT